Let the community know what you think. Share your opinions now!
For me, I want the service to be able to protect my organization against the widest array of threats, be able to effectively deal with new threats, and give me as much information/visibility as possible (in an efficient manner) to handle the exceptions.
ATP should be able to give real time visibility and ensure that the attack fully denied. A forensic and detailed log combined with AI suggestions to prevent further attacks should also help IT teams to fortify their infrastructure.
When evaluating ATP, I think in interrupting the lifecycle of the attack to ensure that the threat is unable to progress or preceed.
real time visibility that includes abnormal network behavior.
I want it protect my organization corporate network and end device for threats and inform me as soon as detected anywhere in the network and end point device
Advanced Threat Protection
What steps should businesses take to assess and improve their security posture? What tools would you recommend for this purpose?